Malicious
d98533a20ad671484fa0445fabc4a6c6
ZIP Archive
MD5: d98533a20ad671484fa0445fabc4a6c6
Size: 818 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
818 B · 818 B
First seen
2026-08-04 08:04 · 2 months ago
Last seen
2026-08-04 08:04 · 2 months ago
Last analysis
2026-08-04 08:04 · 2 months ago
Hashes
MD5
d98533a20ad671484fa0445fabc4a6c6
Sha1
853afc8f0d0581bf806048b69c235bfee1f1e223
Sha256
4e57a22b38dd46765f33c80bc1d43863ed0d3d26ff03f3e5901c9315ffc44355
Sha384
acd372dc1423b8eeeb2b44de72b0b1babdd070c61db4a779e5a66ad18e585c37ba56e607dbcd6c13fc69e27c7e98f205
Sha512
fc10277f5871bf652037bbeb15840f06ae568b39ef327f8ff5de4205c81bdb36d61dbb1fb78889c3aac587a13e39415aae51afd38893f3c470c06b64d03f524e
SSDeep
12:5jh/jMLT/MIIgzFMzlAsHW9u60etEYAYjpADlG6lLArN3u+OT9zthg6AQmn/4aot:9Jj8IvgzFMPWkpYrp8G663U9z3gd/0t
TLSH
D20175E68B236717E15FDE351870A369F07FCE780A04F2A8D191CC01A65A0ADA745167
3 malicious · 3 files
ZIPd98533a20ad671484fa0445fabc4a6c6T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-RY25JT.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPd98533a20ad671484fa0445fabc4a6c6T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-RY25JT.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
d98533a20ad671484fa0445fabc4a6c6 › DOC-RY25JT.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account